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TITLE: GAMING SYSTEMS AND METHODS 

TECHNICAL FIELD 

This invention relates to gaming systems, methods, means and apparatus 
5 involving betting or wagering where money or credit transfers take place. 

In some aspects, this invention is suited to computer-mediated live gaming 
involving gamers who are remote from one another and/or from a gaming center 
(eg, a casino) but who are able to communicate in real time via 
10 telecommunication links that may include live video. The live video link in such 
systems may be used to show the players to one another and/or to show a 
croupier and gaming table to remote players. 

In other aspects, the invention is suited to the regulation of gaming where the 
is amount of an individual bet, the rate of betting, the access of individuals to games, 
or the like features of gaming can be controlled or regulated. 

BACKGROUND TO THE INVENTION 

On the one hand, there is growing concern about the social damage caused by 
20 excessive gambling and by 'problem gamblers 1 who do not have the financial 
means to support their gambling habits. On the other hand, most casinos wish to 
attract wealthy gamblers (herein called 'high-rollers') who play for high stakes to 
their tables, since they can be the most profitable of casino customers. Players of 
both classes may wish to be able to remain anonymous when gaming, to be able 
25 to take advantage of on-line or remote gaming via the Internet, an intranet or 
some private computer-mediated telecommunications network, or to be able to 
play between themselves without mediation by a casino croupier 

From the standpoint of social policy, government authorities may wish to regulate 
30 the access of problem gamblers to casinos or gaming machines. For example, a 
civil court may wish to place restrictions upon a particular problem gambler, with 
respect to casino access, the value of bets that can be placed, the frequency of 
betting, the maximum amount that can be lost over a given period of time, etc. 
Until now, such restrictions were impractical and would have placed unworkable 
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obligations upon casinos. The situation is even more difficult where problem 
gamblers play on-line via the internet. The present applicants are not aware of 
prior art that addresses these social concerns. 

5 Of course, the situation in relation to high-rollers is quite different. Wealthy high- 
rollers seldom qualify as problem gamblers in the context of social policy. High- 
rollers generally like to participate in games involving other high-rollers but 
casinos cannot always arrange for such piayers to be present at one time. Also, 
many high-rollers are busy people who cannot spare the time to travel to a casino 

10 — whether in their own country or another - for the sake of one or two games. It 
would be desirable, therefore, to have a gaming system that allows gamblers at 
one or more remote locations to participate in a casino game, perhaps involving a 
dealer or croupier and perhaps including one or more other players at a casino 
table, in a realistic manner. It may also be desirable in such games to allow the 

15 players to be anonymous (with respect to one another, if not the casino), should 
they so desire. In any such system, however, it would be essential to ensure a 
high level of security in relation to the financial transactions of both the casino and 
the player, to safeguard the privacy of the remote player (to the degree required 
by the player), and to minimise the opportunity for fraud on the casino, the players 

20 or their respective banks. 

In addition it would be desirable for the game to be played as realistically as 
possible (subject to the degree to which the identity of the piayers is revealed). 
Thus, it would be desirable for all players to see the croupier and the table or 

25 wheel (or any other gaming device), to hear any calls or comments by the 

croupier, to observe the cards or dice as they fall, to be able to cut a deck of cards 
as required, to see cards discarded or laid face-up by the croupier or other 
players, etc. In addition, it would be desirable for each remote player to have a 
supplementary visual display showing his/her hand, the bets as they are placed 

30 and as they stand, the numerical results of a throw of dice or spin of the wheel, 
who's turn it is to place a bet, who has passed, a textual presentation (in the 
player's preferred language) of any calls by the croupier, etc. 
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It is well known to facilitate multi-player gaming on a network such as the Internet 
where a computer server runs a master video game program, accepts moves 
from gamers and re-computes the game situation in an interactive fashion. US 
patent No. 5,630,757 to Gagin discloses a system of this type that employs a 

5 multi-threaded, multi-process computer operating system and a special protocol 
for communication via cable TV channels. Multi-player video gaming is also 
known where each player employs a copy of the game program on his/her PC 
and connects to the Internet to interact with other players who also have copies of 
the game. In these systems the players can remain anonymous (if desired) and 

10 live video is not an option. Such systems are not suitable for croupier-mediated 
interactive live gambling, nor do they allow for betting and the on-line payment of 
wins and losses. 

It is has also been proposed to use 'electronic playing cards' in casino-mediated 
15 poker and the like games to eliminate the danger of card marking and 'cross- 
roading' (improper manipulation by a croupier to favour or disfavour a particular 
player). For example US patent No. 5,669,817 discloses the use of computer 
monitors for each player and for the dealer so that cards can be dealt 
electronically and each player's hand can be displayed to him/her alone. While 
20 'electronic' shuffling, cutting and dealing has the advantage of avoiding croupier 
bias, the system of the last mentioned US patent required the croupier and 
players to be in the same room and all losses and wins to be settled on-site in the 
normal manner. No means of enabling remote play via live video, or remote 
settlement, was disclosed. 

The participation of multiple remote players in a common board game via a 
network is also known. For example, US patent No. 4,372,558 discloses means 
whereby two remote Go players can each make physical moves (in proper 
sequence) on their individual boards and have the moves validated and 
30 transmitted for display to the other player. In this case, however, live interactive 
video and audio links are not used and no provision is made for gambling or the 
handling of financial transactions. 
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US patent No. 5,762,552 to Vuong et al discloses an interactive real-time gaming 
system that has provision for both audio and visual feeds and allows players at 
remote audio-visual terminals to place bets in more than one casino-operated 
game of chance at one time. However, the system is such that the remote bets 

5 must be placed at rates that are independent of rates of play of each game. This 
greatly limits the type of game that can be played using the system. Of most 
importance in the context of the present invention many - if not all - live, croupier- 
mediated casino games of interest to high-rollers will be excluded. In fact, the 
non-synchronous play feature effectively confines the system to paying multiple 

10 slot machines or other machine-generated games of chance where bets can be 
'stacked' in advance of play. Though the need for financial security and 
authorisation is recognised by the teachings of this patent, there is no disclosure 
of a suitable method of implementing the necessary authorisation and security. 

15 US patent No. 5,800,268 to Molnick discloses a method of validating the financial 
transactions of players who participate in a live casino game from remote 
locations via a communications network. Each remote player receives live 
television and data signals relating to a casino game at his/her remote station and 
uses it to convey bet information to the casino. Before the player is permitted to 

20 join a game or place a bet, the casino establishes a direct and open link to the 

player's bank or other financial institution that allows the casino to instantaneously 
(i) check that the player has enough credit to cover each bet as it is placed (ii) pay 
winnings directly into the player's bank account and (iii) recover losses directly 
from the player's bank account. The need to establish and keep open a line to 

25 each player's bank comprises considerable risk of fraud or misappropriation of 
that player's funds by casino employees, hot to mention the loss of personal and 
(normally) confidential financial information belonging to the player. Even when 
there is no foul play on the part of the casino or its employees who are privy to the 
player's personal and bank account details, the personal information gained by 

30 the casino is of great value in targeting further gaming products and in selling-off 
such information to direct-marketing agencies. 
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OUTLINE OF THE INVENTION 

From one aspect, the present invention is based on the use of a chip-card by a 
game player that incorporates an electronic purse from or to which bets, wins and 
losses can be transferred during the course of a game. If use of the chip-card for 
5 gaming is contingent upon biometrically matching the card to the player, the 
player need not be identified to a casino and there is no need for the casino to 
have access to the player's bank account. Moreover, the player is protected 
against loss or unauthorised use of the card by such biometric identification. 

10 The use of an electronic purse in this way is well suited to remote gaming, 
particularly where players are provided with secure computer-based player 
stations capable of reading chip-cards and of being interconnected by suitable 
telecommunications links, preferably using data encryption to ensure security. The 
stations preferably have audio-visual capabilities, being adapted for text and live 

is video display with sound and adapted to take inputs from one or more local video 
cameras. This allows a number of remote players to participate in a real-time, 
croupier-mediated game at a casino from a remote site under conditions of high 
security and (if desired) anonymity, yet with a high degree of realism. Given the 
availability of secure player stations and data encryption, the invention also 

20 permits a group of gamers to play games (eg, poker) in a pari-mutuel manner 
without the mediation of a live croupier. Such possibilities will suit the needs of 
high-rollers. 

On the other hand, if gaming is contingent upon the use of such chip-cards, it will 
25 be possible for regulatory authorities to have a problem-player's electronic purse 
endorsed with conditions. Such conditions may affect the time when games can 
be accessed, the maximum amount that can be placed on any bet, the frequency 
of betting, or the maximum amount that can be lost or risked in a game, for 
example. This possibility will suit the needs of government authorities with a 
30 concerned about the social and family costs of gambling. The conditions can be 
recorded in the chip-card (appropriately encrypted) by the player's bank, in much 
the same manner as banks are required to obey court directions regarding the 
garnisheeing of customer's wages. The use of such cards can be required by a 
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casino or gaming room for access to any gaming machine, here included in the 
term 'player station'. 

In one possible mode of croupier-mediated play, player access to a player station 
5 is conditional upon the matching of biometric parameters read from the player at 
the time of intended access with the same type of parameter that has been pre- 
recorded on the chip-card and/or in the player station. Each player station 
includes a chip-card interface unit or dock into which a player's chip-card must be 
inserted. If the read and pre-recorded biometric parameters do not match, the 

10 intended player is denied access to the station or gaming machine. After biometric 
identification has been effected, the player can then initiate participation in the 
game according to the procedures promulgated by the casino, at which point the 
monetary value in the electronic purse is transferred to the card reader/dock or to 
a secure register in the player station where it can be accessed by the croupier. 

is Alternatively, the contents of the player purse may be transferred to an electronic 
casino game purse or electronic 'safe' and held in trust by the casino for the 
duration of the game. At the end of each betting round or game, all wins and 
losses can be settled by electronic transfer between the various secure registers 
and/or electronic purses. Such an arrangement facilitates pari-mutuel gaming with 

20 or without croupier mediation. 

The croupier purse or safe can be a chip-card that is inserted by the croupier in 
the croupier station and that is accessed by croupier for each game by biometric 
identification means, as in the case of the player cards and stations. In that event, 

25 transfer of monetary value between the croupier's purse and the casino occurs in 
like manner to the transfer of value between the player's purse and the player's 
bank. However, it may be desirable to ensure that all value remaining in the 
casino purse at the end of a game is automatically transferred to the casino. 
Alternatively, the casino game purse could be a secure computer file or electronic 

30 'safe' in the casino station, rather than a removable chip-card 'belonging to' the 
croupier. However, it is preferred that access to such a file by a croupier is still 
conditional upon biometric identification of the courier. 



WO 00/58858 



PCT/AUOO/00251 



Conveniently, the player station may be used in association with a personal 
EFTPOS terminal approved by the player's bank so that monetary value can be 
transferred directly from the player's bank account into his/her game-card. This 
may be done via a bank-issued magnetic-stripe credit-card and the appropriate 

5 PINs, via a separate chip-card owned by the player using PINs or biometric 
identification, or via the player's gaming chip-card itself In this way, the bank- 
related transactions are kept private and secure with respect to the casino staff 
and other players. This will not affect the casino's ability to verify (i) that the 
gaming chip-card has been properly validated and (ii) the amount of money in that 

10 chip-card. However, unlike the prior art system of Molnick, this can be done 

without disclosing any financial or personal details about the player to the casino. 

Normally biometric identification will be used by each player and the croupier each 
time the respective chip-card is inserted in its card dock or reader, it being usual 

15 to leave the card in its dock for the duration of the game. This allows a player to 
permit someone else to actually play a game after it has been properly initiated. 
Unlike the prior art system of Molnick, this can be done without having to provide 
the substitute player access to the authenticated player's bank account or PINs. 
Alternatively, a player may elect to require biometric identification each time 

20 monetary value is transferred to or from his/her chip-card. 

The particular biometric identification system or systems employed for the gaming 
smart-card will generally be determined by the gaming systems supplier or by the 
customer (usually the casino or a player syndicate). The player's bank may not 

25 require a biometric identifier, being content with a PIN-based security system. 
Known and commercially available biometric identification systems, based upon 
signature, fingerprint, voiceprint, iris or facial recognition, may be used. Most of 
these systems will be incorporated in chip-card readers since they are too 
complex or bulky for incorporation in chip-cards. For example, a fingerprint 

30 recognition system has been implemented by Netherlands Customs and a face- 
recognition system has developed by CSIRO and Banque-Tec of Australia for 
checking passports. However, a chip-card incorporating thumbprint recognition 
has been developed by Siemens of Germany. 
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A variety of measures are taken in this example to ensure system integrity and 
freedom from tampering, all of which can be implemented by those skilled in the 
art. These measures include: 

• The physically integration of the input devices of a station, such as a 

5 keyboard, mouse, touch-screen, a biometric scanner and the chip-card dock, 

in a physically-locked casing together with the rest of the computer 
components. The only inputs and outputs - apart from the chip-card and its 
data - are, thus, encrypted electronic signals that enter and leave via multi-pin 
sockets. 

10 • The elimination of removable disc-drives and memory cards other than the 
player's chip-card. 

• Unauthorised opening of the case is alarmed and effects immediate 
disablement of the station and user lock-out. 

• Authorised opening of the case can only be achieved upon the insertion of a 
is service chip-card and biometric identification of the card owner. 

• Any physical substitution or modification of station hardware or firmware (eg, 
EPROM or BIOS chips) is automatically and securely logged with data from 
the service card. 

• Any attempt to access, read or change system or sensitive data files (eg, 
20 encryption keys) in a station by remote access via the telecommunications 

link is alarmed, logged and may cause disablement of the station. 

• Any unauthorised substitution or modification of croupier station hardware or 
firmware during or prior to a game. 

25 To implement these security provisions in respect of a player station normally 
requires that each player station be set up, serviced and supplied by the casino 
or an independent system provider. Implementation of the security provisions in 
respect of the croupier station will include additional procedural safeguards for 
effecting the transfer of cash to and from the purse or secure register of a player 

30 station. 

As is normal in data communication systems involving financial transactions, the 
data transferred between the player's card reader and his/her station (including 
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video and audio signals), as well as the data transferred between the croupier 
station and the player station, is encrypted so that any eavesdropper will be 
unable to interpret that data or masquerade as a player. As already indicated, 
any unauthorised attempt to access encryption keys stored in either station will 
5 involve violation of station/system integrity and may cause system failure or 
player lock-out and, preferably, any such violation will automatically generate a 
recorded 'audit trail\ 

The telecommunications protocol employed for communication between gaming 
10 stations can be any suitable protocol known in the art. It will conveniently be IP 
(Internet Protcol) if the Internet is employed. It will be generally preferable to set 
up a private ISDN or ASDL network for each gaming session involving high- 
rollers. This will generally include an ISDN or ASDL bridge (located at the casino 
or in the premises of the telco) and an ISDN or ASDL terminal in each player 
15 station, or gaming room. The telecommunications media employed is 

unimportant as far as the present invention is concerned, it being left to the telco 
to furnish the necessary physical connections and bandwidth. It might be 
expected that optical fibre and microwave/satellite trunks would be employed 
and that IP, ISDN and/or ASDL connections would exist at each player's 
20 premises as well as at the casino. 

In the context of the present invention, the term 'casino' is used loosely to 
indicate any establishment that offers gaming machines or croupier-mediated 
games (whether the croupier is a human individual or takes the form of a 

25 computer program). The term 'chip-card* is used to indicate a card-like device 
that incorporates a microprocessor chip, addressable memory (whether 
EEPROM, EPROM, ROM or RAM) and electrical or magnetic coupling means by 
which the card can be connected to other electronic devices. The processor is 
usually adapted for cryptoprocessing (eg, the use of public/private key security, 

30 and optimised for variable-length arithmetic, modular exponentiation, 

asymmetric, elliptical or DES encryption under ANSI X3.92). Such cards may be 
issued by a certification authority that uses a special card dock which 'burns in* 
key data such as biometric or alphanumerical data characteristic of the owner, 
once the identity of the owner has been authenticated. A smart-card is a 
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particular form of chip-card that conforms to accepted standards, such as ISO 
7810, 7812, 7816, 10536, 10373 and 14443. 

An 'electronic purse' can be regarded as the configuration of a chip-card for 
5 financial transactions involving the storage and transfer of monetary value in a 
manner recognised by banks or other financial institutions. Such transactions are 
the subject of ISO TC 68, ISO SC 6 and ISO 10202. An example of an existing 
chip-card having an electronic-purse function is the Mondex card developed by 
the National Westminster Bank of the UK. The Mondex card does not require 
10 biometric identification for its use, nor does it require individual transactions to be 
reported back to the issuing bank. It allows the direct transfer of monetary value 
between Mondex cards using suitable docking stations. Since the Mondex card 
serves as a flexible electronic purse, it may be used in this invention, provided 
separate biometric identification is effected. Europay, MasterCard and Visa are 
15 reported to be developing a similar financial transaction chip-card. For 

convenience, the financial transaction function (and associated circuitry) of a 
chip-card that permits the storage and transfer of monetary value will be referred 
to herein as an 'electronic purse', unless otherwise indicated. 

20 A pari-mutuel game will be taken herein to be one where the bets of losing 
players are transferred to the winning player(s). Pari-mutuel gaming normally 
does not allow players to play against the casino and is mandated in some US 
jurisdictions. When a pari-mutuel game is mediated by a croupier in a casino, the 
casino normally takes a small pre-agreed percentage of the player's stakes or 

25 transactions in each betting round, leaving the remainder of the wins and losses 
to be apportioned between the players. 

Finally, in this specification, the term 'fingerprint 1 will be used to include 
thumbprint 1 . 

30 

DESCRIPTION OF EXAMPLES 

Having generally portrayed the nature of the present invention, a particular 
example will now be described by way of example and illustration only. In the 
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following description reference will be made to the accompanying drawings, 
wherein: 

Figure 1 is a schematic diagram of a gaming system that forms the first 
5 example of the implementation of this invention. 

Figure 2 is a chart indicating the sequence of interactions between the 
player and casino stations during a typical gaming session employed in the 
system of the first example. 

10 

Figure 3 is a schematic diagram of a gaming system that forms the second 
example of the implementation of this invention. 

Figure 4 is a schematic diagram illustrating one method of issuing a gaming 
is card that carries a court-imposed endorsement to limit gaming by a problem 

gambler. 

With reference to Figure 1 , the gaming system 10 of the first example involves a 
casino 12 and two remote player locations or rooms 14a and 14b for the use of 

20 high-rollers. In this example, casino 12 includes two gaming rooms 16a and 16b 
and a secure computer/communications room 17. Each gaming room has a 
computer-based croupier station 18 fitted with a video camera 19 and a gaming 
table 20, all under the charge of a croupier 21. Casino communications room 17 
includes a file server 22 and an ISDN video bridge 24, server 22 being connected 

25 to croupier stations 18 and to bridge 24. Of course, there may be more than two 
gaming rooms 14 fitted with croupier stations 18 so that multiple simultaneous 
games can be played and players can select which game(s) they wish to join or 
set-up. 

30 Bridge 24 includes an ISDN modem and video codec. It outputs data and video 
signals in ISDN format to a telecommunications carrier on line 25 having ground 
transmit/receive dishes 26 and 28 and a satellite repeater 30. It will be 
appreciated that any other suitable signal protocol, such as ADSL, might be used 
and that the telecommunications link might just as easily be terrestrial, or a 
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combination of terrestrial and satellite links. The nature of the transport protocol 
and the link is immaterial to the present invention. For convenience of illustration, 
player rooms 14a and 14b are shown as each being connected to ISDN line 32 
from common receiver dish 28, but it will be appreciated that the rooms may be in 
5 different countries and connected to different dishes or other telecommunication 
links. 

Each player room 14 of this example is equipped with an ISDN interface unit 40 
that which includes an ISDN modem and video codec and is connected to a 

10 computer-based player station 42, which is equipped with a video camera 44. 
Camera 44 may be used during a game at the option of the player(s). Player 
station 42 can be fitted with various player-input devices such as a touch screen, 
keyboard and/or mouse (which are not illustrated) but preferably has a smart-card 
writer/reader interface 45 built-in. If desired, rooms 14a and 14b may also be 

is equipped with a personal EFTPOS terminal 46 that incorporates a modem, a 
telephone, a keypad and a swipe-slot for use with conventional magnetic stripe 
credit cards. EFTPOS terminal may be connected directly to player station 42 to 
allow monetary value to be transferred to and from a smart-card in interface 45. If 
desired, a video recorder and/or a printer (not shown) may be connected to player 

20 station 42 but, other than these optional connections and the essential 

connections to ISDN interface 40 and the power supply (not shown), the station is 
a sealed unit with high levels of software and mechanical security. 

Player station 42 is equipped with a biometric input device (not separately 
25 illustrated) which may comprise a facial recognition program that takes its input 
from camera 44 or from an in-built dedicated facial scanner of a type known in th 
art. Alternatively or additionally, the biometric input device may be a built-in 
fingerprint scanner device that requires the player to press his/her finger onto a 
glass plate (as is also known in the art). Alternatively or additionally, the biometric 
30 input device may be a fingerprint scanner and recognition system built into the 
smart-card itself, as is available from Siemens of Germany. 

After a player has turned on the power to player station 42, placed his/her smart- 
card (indicated at 47) into reader 45 and been biometrically identified, the use of 
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EFTPOS terminal 46 allows the player to dial his/her bank 48 via telephone lines 
50 and, after use of his/her credit card and its associated PIN, to effect the loading 
of the smart-card using with cash (in a manner to be describe below) to establish 
a game purse. This will be effected without the PIN or other personal information 

5 from the player's credit card being made available to the casino or gaming 

system. The player's smart-card could be supplied by the casino, by the player's 
bank or by a third party, as preferred by the player. In either case, the supplier 
undertakes the initial biometric identification of the player, effects the recording of 
the biometric data in the card and, if desired by the player, loads' the smart-card 

10 purse with monetary value. 

Generally, supply and installation of the player's personal EFTPOS terminal 46 
will be effected by arrangement between the player and his/her bank 48. Where 
the player station 42 is installed in an agent's premises for use by more than one 
is player, it will be normal for each player to simply bring his/her EFTPOS terminal 
46, along with his/her smart-card 47) to the selected game (ie, room 14a or 14b). 

An exemplary procedure for setting up and operating a game is illustrated by the 
chart of Figure 2. Once the all participating players for a particular game have 

20 been 'assembled' on-line by the casino, the players can mutually decide whether 
they wish to be identified or remain anonymous. If a two-way video conference 
system is employed, the player's monitor would normally display the other players 
in separate windows located around the gaming table so that their movements 
and expressions can be observed and their calls heard by all participants. If the 

25 players choose to be identified but not to activate the two-way video-conferencing 
facility, a still image selected by each player could be substituted for the live 
image, or no image need be used. Players can be assigned their real names or 
pseudonyms for the purpose of the game. These names can then appear in the 
appropriate places around the table (as displayed on the video monitors) and 

30 used by the croupier in oral communication with the players. 



While the croupier responsible for a particular game would act exactly like a one 
at a conventional casino table, it is preferable that the results of a card shuffle, 
card deal, throw of dice or spin of the wheel be determined electronically in a truly 
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random manner. Thus, the cards dealt by the croupier in a card game, the fall of 
dice in craps, the lodgement of the ball in a roulette wheel etc, would be 
computer-generated and shown (as appropriate) in a window that appears in the 
video monitor at the appropriate time. Besides depicting face-up cards on the 
5 casino table via the video link, the casino station communicates to each player the 
cards dealt to him/her in a manner that is securely hidden from the croupier and 
other players alike. Similarly, each player station communicates to the casino 
station the identity of any cards discarded or turned face-up by the respective 
player and the results of any dice throw relegated to the player. While the casino 
10 station could determine the result of a player's dice throw using its random 
number generator, it is psychologically preferable that the player's station 
generates uses its own random number generator to determine the cast of the 
dice. 

is As in a normal casino game, however, the croupier is responsible for the 

management of a game, recording bets, signifying which player has the call, and 
resolving disputes between the players. To enhance realism when video 
conferencing is employed, the croupier may physically place piles of chips in each 
player's position or elsewhere on the gaming table to indicate the lie of bets at a 

20 given time, moving them around at the end of a round to show bets lost and won 
in the normal manner. The placing of bets would, of course, be communicated 
electronically by the players at their respective player stations to the 
casino/croupier. If desired, bets placed by players could be digitally incorporated 
into the display of the casino table as visual images of piles of chips. As it is 

25 unlikely that the monetary value of a pile of chips can be determined reliably from 
the monitor display at a player station, each player has the facility to interrogate 
the value of any bet and/or to have all bets on the table shown clearly in dollar 
terms on his/her monitor. Other, more general, features of a game may also be 
displayed upon request by a player. For example, the rules of a game, the casino 

30 'take', whether the game is being played in pari-mutuel mode, etc. 



As indicated in Figure 2, the croupier station has a 'safe' (secure computer file) in 
which the croupier establishes a computer account for each player, once the 
above mentioned preliminaries have been settled and a round of betting is about 
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to take place. By individual interaction with croupier, each player then effects the 
transfer of sufficient monetary value in his/her purse to the appropriate account in 
the casino safe to cover the amount that he/she is prepared to wager during the 
game. However, as also indicated in Figure 2, additional amounts can be 

5 transferred in this way during a game and, indeed, the player can 'top up' his/her 
smart-card purse using the EFTPOS terminal as the game progresses. Of course, 
losses and wins for each betting round are displayed on each player's station, 
together with the amount remaining in the player's account in the casino safe. At 
the end of the game, the amount remaining in the player's account is returned to 

10 the player's purse. 

The second example of a gaming system, indicated at 100, is illustrated by Figure 
3 f where three computer-based player stations 102 are connected to one croupier 
computer-based station 104 in a casino 105, with or without the use of video links, 

is cameras and live game simulation indicated in the first example. As before, each 
player has a chip-card 106 in which a coded biometric identifier characteristic of 
the player is stored, as well as an electronic purse. In contrast to the first example, 
however, the croupier station 104 requires the use of a croupier chip-card 108 that 
stores a biometric identifier of the croupier and an electronic purse. As in the case 

20 of each player, the croupier's card 108 must be in place in station 104 and the 
croupier must be validly identified to station 104 using the stored biometric 
identifier in the station and/or card before the croupier can participate in a game. 

Also in contrast to the first example, each player station 102 has a secure register 
25 1 10 (computer file) and, preferably, croupier station 104 also has a secure register 
112. These registers serve as temporary buffers for the transfer of monetary value 
to and from the croupier. The croupier has access, via station 104, to all player 
registers 110, but no player has access to croupier's register 1 12 or to that of 
another player. Indeed, the existence of these registers need not be apparent to 
30 the players or the croupier. 



During the betting round of a game, each player signifies the amount of the bet 
being placed. This amount is automatically transferred from his/her electronic 
purse in card 106 to register 110 of the respective station, the amount of the bet 
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being communicated to the croupier and to each other player in accordance with 
the rules of the game. When all bets have been placed, the monetary value in 
each player register 1 10 is transferred to croupier register 112 and, after the 
results of the round have been determined, monetary values representing winning 

5 bets are transferred to registers 1 1 0 of the appropriate players. This may be done 
automatically or at the instigation of the croupier. Either after each round or at the 
end of the game, all monetary value in croupier's register 112 (usually the 
casino's return) can be transferred to the casino or to the croupier's purse in card 
108 or direct to the casino. Though not essential, the use of an electronic purse in 

10 the croupier's card may be a convenient way of establishing and quarantining a 
game 'bank' from larger casino funds in electronic form. 

It will be appreciated that the system of the second example is well suited to pari- 
mutuel gaming without the participation of a croupier, particularly in games where 

is card dealing, dice rolls, roulette wheel spins etc can be simulated by a computer 
and where game rules are well defined. Indeed, provided the computer system 
and its associated games are created, programmed, checked and marketed by 
reputable agents, and provided adequate security against tampering is ensured in 
the manner indicated, such games effectively eliminate player cheating, even 

20 where large bets are placed by players who are not identified as individuals to 
casinos or to one another. 

In the third example, it is envisaged that access to any gaming machine or game 
in a casino requires the use of a chip-card having an electronic purse and the 

25 biometric matching of a player with the pre-recorded and encoded biometric 
parameters stored in that card. In this way, the casino can cooperate or comply 
with regulatory agencies concerned to limit access by problem gamblers. The 
manner in which chip-card can be issued to such gamblers is illustrated in Figure 
3. First, there needs to be requirement that chip-cards to be used in gambling are 

30 to be specially coded and made available only through approved agents, such as 
banks. Second, each agent needs to be supplied with a list of court orders 
currently applying to problem gamblers, together with the restrictions that the 
court has imposed on each such person. Third the persons concerned need to 
properly identify themselves to the bank or other agent. 
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On those assumptions, and with particular reference to Figure 3, a player 200 
approaches his/her bank 202 (the agent) requesting the issue of a chip-card for 
the purpose of gaming and requesting the transfer of funds from the player's 

5 account into the card's purse. Player 200 duly identifies himself/herself to bank 
202, which then obtains a copy of the relevant court order 204 from a court 206 in 
paper or electronic form. The bank 202 then places a gambling chip-card 208 in 
an appropriate card dock or interface 210. A biometric identifier is then read from 
the player and encoded in a chip-card 208, together with codes representing the 

10 monetary value transferred to the purse and the restrictions applied by the court 
with regard to betting amounts and frequency and with regard to 
permitted/prohibited games. [The amount of monetary value transferable to the 
purse will generally be restricted as well.] 

is When player 200 presents the card to a casino machine or croupier (not shown), it 
is placed within a card reader, the player is biometrically checked and the 
gambling restrictions applied automatically from encoded data recorded in the 
card. If the restrictions permit, player 200 can transfer additional funds to card 208 
using his/her PIN in a combined EFTPOS terminal and card-dock 212 connected 

20 to bank 202 via phone line(s) 214. The court restrictions encoded in the card can 
then be read by the bank and the appropriate limitation on funds transfer applied. 

Security Considerations 

(a) Fraud bv a Plaver 
25 The principal and most serious avenues for a player to defraud the casino or 
another player are (i) to place bets that he/she cannot cover, (ii) to renege on a 
bet or play which has been made and (iii) to employ slight of hand to substitute 
cards or dice etc. These actions also may be associated with the assumption of a 
false identity by the player. 

30 

The first two avenues for fraud are closed off according to the present invention 
either by the use of a game-purse, or a bet-buffer/register, accessible during a 
game by the croupier so that a player can be prevented from placing a bet which 
cannot be covered, from reneging on a bet which has been placed or from 
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declining to pay a lost bet to the casino or another player. The third avenue for 
fraud is largely avoided by the use of electronic media and 'virtual' gaming where 
real cards and dice are not employed. The electronic equivalent of such fraud 
would be the programming of the player's machine to bias or determine the result 

5 of a throw of dice or a card deal or shuffle, or to change the cards dealt in a hand. 
These avenues for fraud can be prevented by securing the player's station against 
programming access or tampering and suitably encrypting communications 
between players and the casino/croupier Identification of a player as a person to 
the casino or to other players is not a relevant consideration in the context of this 

10 invention. 

(b) Fraud bv the Croupier or Casino 

The outcome of games and the odds in most games of chance can be 
fraudulently manipulated a casino or croupier. Croupier fraud on the casino 
is usually by 'cross-road ing\ Such fraud is greatly restricted where dice throws, 

wheel-spins, card shuffling and the like are performed by computer. Access by the 
croupier to the programming of the sealed croupier station can be readily 
prevented with the security systems of the art. 

20 While rigging of a game by a casino at the expense of players through 
manipulation of a the gaming program is certainly possible if the casino is 
responsible for the programming and the maintenance of the croupier stations, it 
can be readily checked by independent experts, if the game program is in sealed 
and self-contained croupier stations (not in the casino's computer system). 

25 Computer-mediated gaming also makes it easy for players to accumulate game 
statistics that would reveal systematic bias. Pari-mutuel gaming without the 
participation of the casino or the croupier, as disclosed herein, should be totally 
free from such cheating. Finally, as there is no need for the casino to have access 
to the player's bank account or banking details; or, even, to the player's identity, 

30 avenues for pressure by the casino are greatly restricted. 



(c) Fraud bv Third Parties 

Fraud by impersonation of a player to the casino, to other players or to a bank is 
effectively eliminated, according to the present invention, by requiring the use of 
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chip-cards carrying biometric identification. A more serious threat is perhaps that 
where a third party can hack into the gaming system while a game is in progress, 
gain access to the croupier's and/or player's purse, electronically extract money 
therefrom and transfer it to his/her chip-card purse. Protection against this threat 
relies upon ensuring system integrity and security. 

Ensuring System Integrity and Security 

The above analysis of the risk of fraud suggests that system security is of primary 
concern. Hacking of the system might allow modification of random number 
generators, card-shuffling routines or the like, and/or access to electronic purses. 
Accordingly, data and video transmissions between the casino and each player 
are preferably encrypted using encryption keys located in both the player station 
and the croupier station. Many commercial encryption systems are available of 
sufficient power to prevent eavesdropping by third parties on transmissions 
between the players and casino, and, to prevent effective signal substitution. 
What is left, then, is the securing of the player and casino stations against 
unauthorised use, unauthorised access to the respective game purses and 
unauthorised access to the encryption keys. 

To achieve the desired level of security, one or more of the following features may 
be incorporated in each player and the croupier station: 

1. No externally accessible disc drives or connections therefor are provided so 
that the only ways of changing settings within the station are (i) by physical 
substitution of station components (eg, plug-in cards or ROM chips) and (ii) via 
the network using encrypted commands. 

2. The station is housed within a casing that is physically locked against opening 
and is alarmed so that, immediately the casing is opened, key data (eg the 
purse software, the BIOS, all encryption keys and important hard-disc files) is 
deleted or the unit is otherwise crippled. 

3. All key components of the player station, including the BIOS chip, are tagged 
with identification codes so that the system will not boot-up if any component is 
missing or a substitution has been detected. 

4. A firmware 'dongle' is incorporated within the case and includes encryption 
codes essential for reading hard-disc files, for operating the computer system 
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and for transmitting and interpreting network messages. The dongle is 
connected to the system bus and battery supply in such a manner that its 
removal will result in the loss of its data. 

5. The use of public-key infrastructure to identify and authenticate the casino and 
the player. 

6. The use of software audit trails of all financial transactions made during a 
game. [Such audit trails may be mandated in some jurisdictions for all 
electronic financial transactions above a predetermined monetary value.] 

In addition, a variety of known methods of improving the security of the chip-cards 
may be employed, some of which have already been mentioned. For example, 
key personal identifiers can be 'burnt' into the chip using fusible links so that they 
cannot be subsequently altered. In a similar fashion, unalterable 'firewalls' may be 
included in a chip-card to separate applications and/or to prevent the overwriting 



While it will be appreciated that the examples offer important advantages over the 
art, many variations and other examples are possible without departing from the 
scope of the invention as defined by the following claims. 
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